Quantcast

Articles

Get all-in-one coverage of Internet security and online privacy issues brought up by the industry’s leading experts at security conferences and seminars.

Hacker’s Guide to Stay out of Jail 7: VPNs vs. TOR

The Grugq dwells here on the issues of anonymity and privacy for freedom fighters, paying a particular attention to the tools for maintaining those. In terms of technologies that you can use to help ensure that you maintain good OPSEC, on the subject of VPN vs. TOR, a lot of people seem to have thought that...

Hacker’s Guide to Stay out of Jail 6: Anti-Profiling

Further explicating OPSEC guidelines for freedom fighters at HITB SEC Conference, The Grugq now focuses on the various ways to prevent personal profiling. In terms of staying anonymous, briefly, if we go over some guidelines, you want to avoid revealing personal information about yourself. Any personal...

Hacker’s Guide to Stay out of Jail 5: Anonymity and Defense

Here The Grugq describes some of the techniques to use for building layers of anonymity and defense which will guard personas from getting associated with you. So, techniques – basically, you need to put in the plumbing. Plumbing is all of the stuff that you’re going to use to maintain your cover...

Hacker’s Guide to Stay out of Jail 4: Be Paranoid and Never Contaminate

In this part of the presentation, The Grugq continues exemplifying the common violations that freedom fighters should under no circumstances make. In this case palladium was insufficiently paranoid (see image). After he got busted, they took him to an interview and they showed him logs that they had...

Hacker’s Guide to Stay out of Jail 3: LulzSec Failures

Highlighting the typical mistakes to avoid, The Grugq provides real-world examples where actual hackers got busted due to unacceptable indiscretion. If you’re trusting people to keep their mouths shut, which you should never do, they won’t. This is why VPNs are not actually secure. VPNs would only be...

Hacker’s Guide to Stay out of Jail 2: Do’s and Don’ts

Covering practical tips for doing OPSEC, this part of The Grugq’s talk makes it clear what you should and should not do when freedom-fighting on the Internet. One methodology for doing OPSEC is, basically, you need to think about how to put the plumbing in first, so you need to set up your environment for...

Hacker’s Guide to Stay out of Jail: OPSEC for Freedom Fighters

During his talk ‘OPSEC for Hackers by The Grugq: because Jail Is for wuftpd’ at HITB 2012 Conference, The Grugq, a well-known information security guru specializing in studying anti-forensic techniques, advises online freedom fighters out there on how to avoid getting busted. This is going to be...

Understanding CAPTCHA-Solving Services in an Economic Context 6: Q&A Part at USENIX

Drawing a line under the presentation, Marti Motoyama takes questions from the USENIX audience about CAPTCHAs proper and the related solving services. Question: You said that one of your goals when you were doing this research was maybe to figure out something about the workforce that you can take advantage...

Understanding CAPTCHA-Solving Services in an Economic Context 5: Do CAPTCHAs Actually Work?

Delving into human solver backends and moving on to the summary, Marti Motoyama provides retrieved statistics and draws general conclusions on the subject. Now we’re going to take a look at the human solver backends to get a sense of the worker experiences. We signed up as a solver on two sites, knowing...

Understanding CAPTCHA-Solving Services in an Economic Context 4: Labor Demographics

Outlined here are a number of experiments conducted by Marti Motoyama and his colleagues in order to figure out the demographic patterns for CAPTCHA solvers. By looking at the labor demographics, we can better understand the cogs that operate within these CAPTCHA-solving machines; perhaps new CAPTCHAs can...